Nostr needs more safety built into it. ACLs for who can read your data, etc. If that needs to happen in a L2, so be it. But until you can control who can read your data, there will be no mass adoption.